I have the same problem you're seeing with the INVALID_PAYLOAD_TYPE because it requires a firewall. That being said, I have't successfully connected through vpn.

You can show and manipulate your routing table by using the command 'route'. Manipulation will require root access.

Without being able to connect myself I probably won't be much help beyond that. Sounds like you have a bigger hurdle to overcome at the moment, though.